$ rpki-client -vvf rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.mft File: B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.mft (raw, json) Hash identifier: zB83hrrlzmTjupzB64fBHcliME11+frkZ8PK9b3tcpw= Subject key identifier: 59:BD:00:0C:3D:3E:D9:90:11:B9:48:C1:E8:7A:B9:95:31:88:E1:18 Authority key identifier: B1:9F:4F:9B:34:D9:08:8B:8C:F2:AC:E3:B0:A5:6A:7E:DF:52:3A:B5 Certificate issuer: /CN=B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5 Certificate serial: 066ECC662005E5FEEEF38E1912F1BDF7991B22F2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 22:33:09 +0000 Manifest this update: Tue 02 Jun 2026 22:28:09 +0000 Manifest next update: Thu 04 Jun 2026 02:02:09 +0000 Files and hashes: 1: 3130332e3137362e3138302e302f32342d3234203d3e20313437313333.roa (hash: 57w/Luhe+7f6hpVSBQNyONJUFdWOrDcV0vHq4jpkSew=) 2: B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.crl (hash: qGykqN6DALDxeZG7Y4Z24S1n7wq6vQDrk/CfPy51k0g=) 3: 3130332e3137362e3138312e302f32342d3234203d3e20313437313333.roa (hash: ebsbFpwP6d3fIBo+fLqzGpd0+qy00iUK8c0JJxLvFRI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.crl rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:6e:cc:66:20:05:e5:fe:ee:f3:8e:19:12:f1:bd:f7:99:1b:22:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5 Validity Not Before: Jun 2 22:28:09 2026 GMT Not After : Jun 4 02:02:09 2026 GMT Subject: CN=59BD000C3D3ED99011B948C1E87AB9953188E118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fe:9e:9a:e5:71:b9:4f:2e:9c:c9:f4:69:97: dd:c7:1e:8f:0d:b8:55:6f:ac:77:fe:bf:6f:e8:32: 54:02:d4:41:0c:cb:9c:65:fc:ac:28:6a:26:28:05: 7b:e9:6e:13:de:ed:b4:37:dc:d7:c9:18:27:c7:96: 9b:13:c5:d2:85:f4:69:e4:09:d6:66:05:4e:e5:6b: 27:94:5d:fe:41:e1:5c:9a:e6:55:8b:d6:a3:b7:3d: 8d:1a:25:66:40:cd:95:59:d5:7e:28:64:f5:91:73: d5:4f:42:f7:0a:9f:7d:d2:94:45:ff:eb:30:6d:9c: 0e:74:38:f3:5b:fd:36:3d:d1:d7:43:3b:90:fc:0b: 47:76:40:88:86:1e:4a:53:75:cb:52:d6:3f:f9:00: d7:b7:4e:08:07:5c:c7:32:c2:f9:2d:72:46:e7:a7: 51:d5:af:f5:30:02:e9:ef:20:9e:00:27:39:16:c6: 2b:03:fb:05:f7:71:87:d3:63:54:fe:3c:64:4b:5d: e4:ae:e6:a0:ec:0a:42:27:93:af:72:3f:44:43:6f: df:63:55:ff:47:14:28:8d:07:f1:d9:8c:f0:a3:56: f9:35:ef:f4:21:0b:b4:52:b0:37:ff:df:69:5e:2d: 09:7b:fb:64:a5:4f:66:9e:87:c0:4f:d9:4a:7e:bd: 34:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:BD:00:0C:3D:3E:D9:90:11:B9:48:C1:E8:7A:B9:95:31:88:E1:18 X509v3 Authority Key Identifier: keyid:B1:9F:4F:9B:34:D9:08:8B:8C:F2:AC:E3:B0:A5:6A:7E:DF:52:3A:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:26:6d:e9:b4:e0:0f:eb:a9:49:86:4b:a1:b0:be:3e:13:2a: be:6c:70:6e:dd:1e:67:12:be:37:70:2c:f6:10:94:d3:b7:ab: 6d:8d:45:6b:11:9c:60:b3:8d:23:8e:66:63:3d:74:e5:2a:d9: ac:ab:f5:35:d2:50:cd:21:c3:a4:74:5f:d4:57:4f:3c:62:0b: 75:e1:bd:8b:a9:3d:88:61:e6:95:4f:01:3a:76:55:8c:fd:f0: 21:f3:80:e6:2c:1d:fb:fb:69:d8:3c:25:bc:5e:7f:04:76:80: 88:f0:7c:2e:55:e6:96:f9:bd:31:e2:49:04:cd:31:04:e7:6e: cd:66:db:45:cf:f5:2d:70:54:e4:75:77:ef:2f:4f:ad:97:1c: 6c:da:b6:ab:77:4f:39:0c:12:b7:90:75:b6:7c:8b:3a:c3:95: 94:a2:87:59:7e:b5:61:78:ec:4a:fc:db:33:9f:99:46:9f:51: 5b:2e:1b:ce:18:3f:2a:44:58:56:32:70:1a:6e:db:31:f5:71: c0:af:28:f8:19:c0:32:69:8c:77:6e:38:29:7e:38:42:ec:62: b1:80:69:3f:a5:06:63:60:5e:8a:58:9f:6b:7b:3c:f9:8c:c4: 15:b0:dd:6d:43:02:09:d6:97:92:ca:47:85:44:be:26:a8:73: b7:02:be:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBm7MZiAF5f7u844ZEvG995kbIvIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE5RjRGOUIzNEQ5MDg4QjhDRjJBQ0UzQjBBNTZBN0VE RjUyM0FCNTAeFw0yNjA2MDIyMjI4MDlaFw0yNjA2MDQwMjAyMDlaMDMxMTAvBgNV BAMTKDU5QkQwMDBDM0QzRUQ5OTAxMUI5NDhDMUU4N0FCOTk1MzE4OEUxMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6/p6a5XG5Ty6cyfRpl93HHo8N uFVvrHf+v2/oMlQC1EEMy5xl/KwoaiYoBXvpbhPe7bQ33NfJGCfHlpsTxdKF9Gnk CdZmBU7layeUXf5B4Vya5lWL1qO3PY0aJWZAzZVZ1X4oZPWRc9VPQvcKn33SlEX/ 6zBtnA50OPNb/TY90ddDO5D8C0d2QIiGHkpTdctS1j/5ANe3TggHXMcywvktckbn p1HVr/UwAunvIJ4AJzkWxisD+wX3cYfTY1T+PGRLXeSu5qDsCkInk69yP0RDb99j Vf9HFCiNB/HZjPCjVvk17/QhC7RSsDf/32leLQl7+2SlT2aeh8BP2Up+vTQ1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWb0ADD0+2ZARuUjB6Hq5lTGI4RgwHwYDVR0j BBgwFoAUsZ9PmzTZCIuM8qzjsKVqft9SOrUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjI4ZGU4NmItYTI2ZS00YjBmLWE4M2MtMDVmYWI0YTMwYzc3LzAvQjE5RjRGOUIz NEQ5MDg4QjhDRjJBQ0UzQjBBNTZBN0VERjUyM0FCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTlGNEY5QjM0RDkwODhCOENGMkFDRTNCMEE1NkE3RURGNTIz QUI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjI4ZGU4NmItYTI2ZS00YjBmLWE4 M2MtMDVmYWI0YTMwYzc3LzAvQjE5RjRGOUIzNEQ5MDg4QjhDRjJBQ0UzQjBBNTZB N0VERjUyM0FCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHwmbem04A/rqUmGS6Gwvj4TKr5scG7dHmcS vjdwLPYQlNO3q22NRWsRnGCzjSOOZmM9dOUq2ayr9TXSUM0hw6R0X9RXTzxiC3Xh vYupPYhh5pVPATp2VYz98CHzgOYsHfv7adg8JbxefwR2gIjwfC5V5pb5vTHiSQTN MQTnbs1m20XP9S1wVOR1d+8vT62XHGzatqt3TzkMEreQdbZ8izrDlZSih1l+tWF4 7Er82zOfmUafUVsuG84YPypEWFYycBpu2zH1ccCvKPgZwDJpjHduOCl+OELsYrGA aT+lBmNgXopYn2t7PPmMxBWw3W1DAgnWl5LKR4VEviaoc7cCvtM= -----END CERTIFICATE-----Generated at Wed Jun 3 03:38:58 2026 by rpki-client